allow authentication on ajax upload action so apps like AutoShare can upload